Exploiting Server Side Request Forgery (SSRF) | HackTheBox Kotarak
In this post, we demonstrated how to exploit SSRF to discover internal hidden services. We performed privilege escalation using…
CVE
JSON Deserialization Vulnerability – HackTheBox Time – CVE-2019-12384 Jackson RCE
Premise In this video walkthrough, we covered a vulnerability in Jackson library that uses JSON Deserialization and used ‘Time‘…
How to test if your exchange server is compromised and vulnerable
Premise In this post, I will briefly talk about testing your on-premises Microsoft exchange server is vulnerable to CVE-2021-26855,…